ICE Is Buying 142 Cleared Intelligence Analysts. The Job Description Is Public. The Targets Are Not.

Abhishek DashUpdated October 20, 202610 min read
A glass-fronted public notice board on a government building filled with municipal notices, with a large official requisition sheet at the centre showing dense tables and an empty grid of ruled cells across its lower half

In short

ERO ONE, short for Enforcement and Removal Operations Overwatch and National Security Enforcement, was forecast on the DHS Acquisition Planning Forecast System on 11 September 2026 and reissued on 17 September, with a draft statement of work posted on SAM.gov on 18 September. The forecast record carries an estimated dollar range of over 100 million dollars, firm fixed price, OASIS+, a contract complete date of 24 February 2032 and an estimated solicitation release of 10 December 2026. The statement of work specifies 142 Intelligence Research Specialists placed across 24 areas of responsibility and three targeting centres in 26 cities, working on intelligence collection support, network and relationship analysis, link charts, and intelligence gap analysis. It also contains a long list of authorities the contractor may not exercise, including making final targeting and enforcement decisions. The programme is advertised in public procurement records. Only the targets are not named.

Key takeaways

  • The 18 September 2026 SAM.gov posting was a presolicitation RFI, closed on 26 September, with no solicitation released and no award made
  • The statement of work specifies 12 task areas, 142 Intelligence Research Specialists and 24 areas of responsibility, and states that the project manager is separate from the 142
  • Section 3.2 of the statement of work bars contractors from exercising arrest, search, investigation or targeting authority, and from making final Government threat determinations
  • The forecast record was reissued on 17 September with a NAICS change and a full replacement of named contacts, phone numbers and emails, with no reason recorded for any field
  • Deloitte is the incumbent on the two existing Williston and Laguna Niguel contracts that cover overlapping work
  • ICE's own fiscal 2021 budget justification already requested 50 positions and 9.1 million dollars for permanent intelligence positions in field offices

The document is public. You can open it, read all twelve of its task areas, and see the name of the person who is supposed to be called if you want to ask a question about it.

That is the part that is genuinely unusual about ICE's ERO ONE programme, and it is the part most coverage has skipped in favour of the alarm.

The details, from the record. On 11 September 2026 the DHS Acquisition Planning Forecast System published a new requirement for ICE's Enforcement and Removal Operations, and on 17 September it reissued it. The estimated dollar range reads "Over $100,000,000.00." Contract vehicle OASIS+. Contract type firm fixed price. Status new requirement. Estimated solicitation release 10 December 2026, anticipated award in the second quarter of fiscal 2027, contract complete 24 February 2032.

The requirements title is: ERO OVERWATCH AND NATIONAL SECURITY ENFORCEMENT (ERO ONE) - INTELLIGENCE RESEARCH SPECIALISTS PROFESSIONAL SUPPORT SERVICES.

The points of contact are Ahren Pagaduan, (202) 302-9298, and Diana Brozi, (202) 430-2428, both at ice.dhs.gov, with Samuel Thompson as the small business and APFS coordinator, and a contract specialist named Nicole Black.

That is the whole administrative skeleton, and a reader can pull every field of it.

What was posted, and what it was not

The 18 September posting on SAM.gov was not a solicitation. Its opportunity type is presolicitation, and its body says: "This RFI is being issued sole for market research and acquisition-planning purposes. It is not a solicitation or request for proposal and does not constitute a commitment by the Government to issue a solicitation or award a contract."

The comment window closed on 25 September at 3:00 pm Eastern, the notice went inactive on 26 September, and its current status is closed. No solicitation has been released. No award has been made. USAspending returns nothing, and that is not a reassurance so much as a structural fact: GAO bid protest jurisdiction attaches to solicitations, and a presolicitation cannot be protested.

What was posted was a draft statement of work and a request for information. The SOW is dated 20 August 2026, version 1.1, so it had been circulating for about a month before anyone outside the government was invited to comment on it.

The shape of the thing

The staffing table in section 5.1 is the part that is worth reading slowly. It specifies 142 Intelligence Research Specialists placed at 24 areas of responsibility and three targeting centres, across 26 cities.

Fifteen analysts sit at the Potomac Center North in Washington. Twelve at the National Criminal Analysis and Targeting Center in Williston, Vermont. Twelve at the Law Enforcement Support Center, also Williston. Nine at the Pacific Enforcement Response Center in Laguna Niguel, California. The remaining 94 are spread across 24 areas of responsibility, running from three each in Boston, Buffalo, Denver, Detroit, Newark, Philadelphia, Salt Lake City, Seattle and St. Paul, up to five in El Paso, Los Angeles, Miami, New Orleans, Phoenix, San Antonio and San Diego.

The project manager is separate from the 142 and sits in Washington, DC, per the SOW. The RFI and the SAM.gov notice both describe two project managers instead, and the RFI asks directly whether two Washington-based project managers are sufficient.

Section 4 lists twelve task areas. They are: intelligence collection support; intelligence research, analysis, evaluation and reporting; intelligence product development; trend, threat and emerging issue analysis; intelligence gap and requirements support; network, link and relationship analysis; intelligence program and process support; liaison and coordination support; field intelligence support; analytical support to operational planning; briefings and presentations support; and complex, sensitive and emerging intelligence matters.

Two of those headings carry the story. The first is the sixth, network, link and relationship analysis, which the SOW describes in terms of identifying relationships among individuals, organisations, locations, events, activities and data points, and producing link charts, network diagrams, timelines and analytical summaries, and finding areas of convergence. The second is the fifth, intelligence gap and requirements support, which by its name is about mapping what the agency does not yet know.

Reading them together, the reasonable description is a contract for relationship mapping of private lives, with a workstream whose purpose is to identify the gaps in what is known. That is a reading of two headings, not a finding about work that has not been done, and no completed product exists to examine.

What the document forbids

The limit on all of this is in the same file, and it is not a footnote. Section 3.2 is titled Government-Retained Authorities and it lists what contractor personnel shall not do.

They shall not exercise arrest, detention, search, seizure, interrogation, inspection, investigative or other law enforcement authorities. They shall not independently initiate, conduct, control or direct criminal investigations. They shall not direct or control intelligence or counterintelligence operations. They shall not establish final Government intelligence priorities or collection requirements. They shall not make final targeting, enforcement, detention, removal, operational, policy or resource-allocation decisions. They shall not approve contractor-developed intelligence products as official Government positions, and they shall not perform any other inherently governmental function.

Section 4.4 adds that contractor analysis is advisory and that "Contractor personnel shall not make final Government threat determinations, establish operational priorities, direct enforcement activity, or make other decisions reserved to authorized Government officials." Section 4.6 puts the same limit on the relationship mapping itself: contractor-provided intelligence research specialists "shall not make final investigative, targeting, enforcement, detention, operational, or other Government determinations based on the analysis." Section 4.10 closes the loop on operational planning.

This is the part that gets left out. The structure is deliberate and it is written into the document rather than asserted in a press release. Contractors analyse, ICE decides, and the paper trail will show link charts being produced by one set of people and enforcement decisions being made by another.

The clearance question

The forecast record says: "The PM and IRS personnel are expected to require an active Top Secret clearance with eligibility for access to Sensitive Compartmented Information (TS/SCI), subject to the final solicitation requirements."

The SOW is slightly more specific for the project manager, who "shall possess an active Top Secret security clearance with eligibility for access to Sensitive Compartmented Information (TS/SCI) before assignment." For the 142 analysts, the text that could be read requires them to satisfy personnel security, suitability, clearance eligibility and access requirements established in Section 12, which is the security requirements section not reproduced in the accessible version of the document.

The point of structure here is that this is non-personal services. ICE supplies the tasking, the contractor supplies the people, and the burden of finding 142 already-cleared analysts falls on the contractor. That is what produces the recruitment difficulty.

The change log, and what it does not say

The forecast record carries a change log with four columns: field changed, old value, new value, date changed. One row shows the NAICS code moving from 541611, administrative management and general management consulting, to 541990, all other professional scientific and technical services, on 17 September 2026, six days after the record first appeared.

Read alone, that is suggestive. A programme that reads as management consulting being recoded as other professional services six days after publication is the kind of detail that invites a theory.

But the same 17 September batch also replaced the requirements contact email, the alternate contact email, the contact last name, the contact first name and the contact phone number, along with all the dates. It was a wholesale refresh of the record, and the change log has no column explaining any of it.

So the question the record actually supports is not why the code was changed. It is whether the 17 September refresh was a substantive rescope or routine re-keying with new contacts. Both readings remain open, and anyone who tells you they know which is which is guessing.

The part that is not new

Some of this predates the draft by five years, and the gap between the announcement and the history is the most useful thing in the file.

Biometric Update's independent read of the SOW found that it requires a transition plan and says the contractor "may have to coordinate with an incumbent contractor." The incumbent is Deloitte, on two existing task orders: one covering Williston targeting operations, internet research and data analytics, and one covering analytical and call-centre support at the Pacific Enforcement Response Center. ERO ONE is therefore partly a re-scope of work already being done, which bears directly on whether the 142 positions are additive to ICE's existing workforce or a backfill.

The same read turned up a budget line. ICE's fiscal 2021 budget justification already requested 50 positions and $9.1 million for ERO Intelligence and Counterterrorism Engagement, to establish permanent intelligence positions in field offices. An October 2025 request for information for the National Criminal Analysis and Targeting Center and the Pacific Enforcement Response Center already contemplated using commercial databases and social media to locate people.

And the SOW carries ICE's own AI governance language, requiring human oversight and barring AI output as sole evidence for punitive action, with biometric identifiers treated as sensitive personal information. That matters because of what the three targeting centres already do: the Law Enforcement Support Center processes roughly 1.55 million biometric and biographic queries a year, the National Criminal Analysis and Targeting Center vetted 7.7 million individuals in fiscal 2021, and the Pacific Enforcement Response Center reviewed 191,177 queries in the same year.

The people who said something

Jay Stanley of the ACLU's Speech, Privacy and Technology Project was quoted in The American Prospect: "It looks dangerously like the construction of an internal spying agency. It's a nightmare in the making."

Michael Wriston, a former military intelligence analyst: "Military intelligence agents compile the same type of research," he said. "He knows because he did that job." And on the task list: "These are the kinds of things that happened in Afghanistan, Iraq, Yemen, Syria, for years. Now that methodology is being brought into the ICE space."

Brian Murphy, a government contractor with 25 years at DHS: "I've only seen it when there is an imminent need to work on something right now. Trump has two years in office. He can't wait." And on the question underneath it: "The question for DHS is, what is the threat they're trying to go after?"

Two things in that reporting are worth more than the quotes. Brozi, the procurement specialist named on the notice, told the Prospect that ICE already knows its potential bidders for ERO ONE, said it was unlikely the agency would hold an industry day, and declined to provide further information. And DHS did not respond to a request for comment on the claim that the programme could be used to spy on political enemies.

The actual state of it

No solicitation, no award, no protest, no congressional response, and a comment window that closed a month ago. The forecast still says 10 December 2026 for the solicitation and the second quarter of fiscal 2027 for the award, and it still says February 2032 for completion. The $100 million is a floor with no published ceiling on a contract that runs for more than five years. The TS/SCI requirement is "expected" and "subject to the final solicitation requirements." The per-city allocation is a reading of a draft.

The programme is not covert and does not need to be. It is advertised in a public forecast and a public statement of work, with named points of contact and a published phone number.

The only thing the documents do not say is who the targets are.

On this page

Sources

  1. Acquisition Planning Forecast System record F2026075521, ICE/EROUnited States Department of Homeland Security, 2026
  2. ERO Overwatch and National Security Enforcement (ERO ONE) request for informationUnited States Immigration and Customs Enforcement, 2026
  3. ICE plans intel units in every field office to research immigrants, map who they knowMichael Wriston and Em Chapin, Project Salt Box, 2026
  4. ICE Planning $100 Million Nightmare Domestic Spy ProgramWhitney Curry Wimbish, The American Prospect, 2026
  5. ICE builds nationwide ERO intelligence layer around biometric targeting operationsAnthony Kimery, Biometric Update, 2026
  6. Targeting Operations Division office overviewsUnited States Immigration and Customs Enforcement, 2026
  7. ICE Is Fast-Tracking a Nationwide Domestic Spy Program Across Dozens of CitiesChris Walker, Truthout, 2026

Frequently asked questions

Is this a contract that has been awarded?

No. The SAM.gov posting was a presolicitation, a request for information issued for market research and acquisition planning, and it says in its own text that it is not a solicitation and does not constitute a commitment to issue a solicitation or award a contract. The comment window closed on 25 September and the notice went inactive on 26 September. The solicitation is estimated for 10 December 2026 and the award for the second quarter of fiscal 2027.

Why is the NAICS code change significant?

It might be, and the record cannot tell you. The code moved from 541611, administrative and general management consulting, to 541990, all other professional services, on 17 September, six days after the record first appeared. But the same 17 September batch also replaced both named contacts, both phone numbers, both email addresses and all the dates, and the change log has no column for a reason. So the honest question is whether the refresh was a substantive rescope or routine re-keying with new contacts.

Do the contractors get to decide who gets arrested?

No, and the statement of work is unusually explicit about it. Section 3.2 says contractor personnel shall not exercise arrest, detention, search, seizure, interrogation, inspection or investigative authority, shall not independently initiate or conduct criminal investigations, and shall not make final targeting, enforcement, detention, removal, operational, policy or resource-allocation decisions. Section 4.4 adds that contractor analysis is advisory and that contractor personnel shall not make final Government threat determinations. Section 4.10 says they shall not approve operational plans or select enforcement targets.

What is the intelligence gap analysis task?

It is task area 4.5, Intelligence Gap and Requirements Support, and the documents do not expand on it. Reading it alongside task area 4.6, Network, Link and Relationship Analysis, the plausible reading is that contractors are being asked to map what the agency does not yet know about private lives so that it can fill those gaps. That is a reading of two headings, not a finding about the work, and no one has seen a completed product.